Privacy statement

01Who we are

Ucar Digital Media is a digital marketing agency based in the Netherlands. For the personal data described on this page we are the controller, which means we decide why it is processed and how.

We are small enough that a data protection officer is not required. Anything on this page is answered by the same people who do the work.

• Ucar Digital Media, Operastraat 2, Barendrecht, the Netherlands
• Chamber of Commerce (KVK) number 88298248, VAT number NL004589346B14
• info@ucardigitalmedia.com
• +31 85 060 0042

02What we collect

Three separate streams, and we keep them separate.

We do not buy contact lists, and we do not build profiles of the people who visit this site.

• What you send us. Your name, email address, phone number, company, website, the services you are interested in, a budget range, your preferred language and the message itself - through the contact form, by email, by phone or over WhatsApp.
• What arrives on its own. mijn.host, our hosting provider, records the IP address, browser type, the page requested and the time it was requested, in ordinary server logs.
• What belongs to our clients. During a project we may see data about a client's own customers. There the client decides what happens to it and we act on their instructions, under a separate processing agreement.

03Why we process it, and on what basis

• To answer an enquiry and write a quote. Steps taken at your request before a contract - Article 6(1)(b) GDPR.
• To run a project and invoice for it. Performance of a contract - Article 6(1)(b) GDPR.
• To keep the books. A legal obligation - Article 6(1)(c) GDPR, together with the seven-year retention rule in Dutch tax law.
• To keep the site online and secure. Our legitimate interest in a site that works and is not abused - Article 6(1)(f) GDPR.
• Anything measured or advertised. Only with your consent, which you can withdraw at any moment - Article 6(1)(a) GDPR. Today this site measures nothing; see the cookie statement.

04Who else sees it

Only the suppliers we need, and only for what they are there for. Each of them is bound by a processing agreement.

We do not sell personal data and we do not pass it on for anyone else's marketing. Where a supplier processes data outside the European Economic Area, that transfer rests on the European Commission's standard contractual clauses.

• mijn.host B.V., Pietersbergweg 291, Amsterdam. It hosts this website and carries our mailboxes, so it holds both the server logs and the correspondence itself. mijn.host states that it runs its own servers in Dutch data centres.
• Google Ireland Limited, because the typefaces on this site are loaded from Google Fonts. Your browser fetches them directly, which tells Google your IP address and which page you are on. No cookie is set in the process.
• Jortt B.V., Transistorstraat 71C, Almere (KvK 64073319). Our bookkeeping runs in Jortt, so our invoices and the client details printed on them sit there.
• Advertising platforms such as Google Ads, for client campaigns we manage. That is client data, not the data of people visiting this site.

05How long we keep it

• Enquiries that do not turn into work: twelve months, then deleted.
• Client correspondence and project files: for as long as we work together, and two years after the last assignment.
• Invoices and anything the tax authority may ask about: seven years, because the law says so.
• Server logs: only as long as mijn.host keeps them for its own security and troubleshooting. We do not copy them and we do not extend that period.

06What you can ask us to do

You can ask for a copy of your data, have it corrected, have it deleted, ask us to limit what we do with it, object to processing based on legitimate interest, or ask for it in a portable file. Where we rely on your consent, you can withdraw it at any time without giving a reason.

Write to info@ucardigitalmedia.com and you will have an answer within one month. We may first ask you to confirm who you are, so that we do not hand your data to somebody else.

If you think we have it wrong, you are entitled to complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens. We would rather you told us first, so we can put it right.

07Keeping it safe

The site is served over HTTPS, access to enquiries and client files is limited to the people working on them, and we choose suppliers partly on how seriously they take this. No arrangement is perfect. If a breach ever put you at real risk, we will tell you and the regulator within the time the law allows.

08Changes to this statement

When something changes we update the date at the top of this page. If a change matters to you - a new supplier, a new purpose, anything measured - we will say so on the homepage rather than hope you read this again.